CVE-2016-9223

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator (CCO; formerly CliQr) could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco CloudCenter Orchestrator (CCO) deployments where the Docker Engine TCP port 2375 is open on the system and bound to local address 0.0.0.0 (any interface).

• CWE-264

• http://www.securityfocus.com/bid/95024Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-ccoMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/95024Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-ccoMitigation, Vendor Advisory

Published

Dec 26, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9217A vulnerability in Cisco Intercloud Fabric for Business and …
• CVE-2016-9218A vulnerability in Cisco Hybrid Meeting Server could allow a…
• CVE-2016-9219A vulnerability with IPv6 UDP ingress packet processing in C…
• CVE-2016-9220A Denial of Service Vulnerability in 802.11 ingress packet p…
• CVE-2016-9221A Denial of Service Vulnerability in 802.11 ingress connecti…
• CVE-2016-9222A vulnerability in the web-based management interface of Cis…
• CVE-2016-9224A vulnerability in the Cisco Jabber Guest Server could allow…
• CVE-2016-9225A vulnerability in the data plane IP fragment handler of the…
• CVE-2016-9226Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9227Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9228Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9229Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…